gabriel / muse public
fix BREAKING task/museignore-tls #19 / 19
AI Agent gabriel · 48 days ago · Apr 25, 2026 · Diff

fix: enforce canonical codec idioms throughout; upgrade signer_key_id to full sha256: fingerprint

- Replace all inline 'sha256:' + hashlib.sha256(...).hexdigest() with blob_id() - Replace all public key fingerprinting with public_key_fingerprint() from _types - Remove 16-char truncated signer_key_id form entirely — was 64-bit collision space - signer_key_id is now the full sha256:<64-hex> canonical fingerprint everywhere - snapshot.py: removeprefix('sha256:') → split_id()[1] in compute_snapshot_id and compute_commit_id - migrate.py: _normalise_key_id() upgrades old 16-char form using stored signer_public_key - transport.py: inline debug hash → short_id(blob_id(v)) - identity/plugin.py: inline sha256 → blob_id() - provenance.py: sign_commit_record returns public_key_fingerprint(), not hexdigest()[:16] - verify_tag.py: docstring updated to reflect canonical fingerprint format - Tests updated throughout to use _types codec functions; hashlib imports removed where redundant - test_status_json_schema: fixture uses code add . to commit dotfiles → clean=True

sha256:fbad7b06074f4277af61670185abbe19198d7b5a64a7ac91390277a2ae82d7b3 sha
sha256:9d2b992877f2b4ed7851f806069b17f1cecbe512fd99b507892b87d2925d1581 parent
sha256:a0482c4f2e2c30e6ff94c38b4bf576ac1b039e24d7e2180993d983d946931f8e snapshot
← Older Oldest on task/museignore-tls
All commits Newer fix: coordination.py split_id instead of hardcoded [7:] prefix strip sha256:9eddee9295ec4f1652bc213e5e9b343eec54a159b3b379f0ae2d119685adb3d8

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:fbad7b06074f4277af61670185abbe19198d7b5a64a7ac91390277a2ae82d7b3 --body "your comment"